Ransomware-as-a-service (RaaS) operation NetWalker relies on partners to disseminate the malware. By the new model, the group accepts only a specific type of collaborator: highly skilled network intruders that can map the environment and escalate their access. There is information that there are currently between 10 and 15 affiliates working for NetWalker. If they play by the rules and ransoms are paid, affiliates could get 80% of the payments, or even 84% if previous week earnings were above $300,000.
Source: https://www.bleepingcomputer.com/news/security/netwalker-adjusts-ransomware-operation-to-only-target-enterprise/

